Skip to navigation Skip to main content

Utilities

  • Subscriptions
  • Downloads
  • Red Hat Console
  • Get Support
Red Hat Customer Portal
  • Subscriptions
  • Downloads
  • Red Hat Console
  • Get Support
  • Products

    Top Products

    • Red Hat Enterprise Linux
    • Red Hat OpenShift
    • Red Hat Ansible Automation Platform
    All Products

    Downloads and Containers

    • Downloads
    • Packages
    • Containers

    Top Resources

    • Documentation
    • Product Life Cycles
    • Product Compliance
    • Errata
  • Knowledge

    Red Hat Knowledge Center

    • Knowledgebase Solutions
    • Knowledgebase Articles
    • Customer Portal Labs
    • Errata

    Top Product Docs

    • Red Hat Enterprise Linux
    • Red Hat OpenShift
    • Red Hat Ansible Automation Platform
    All Product Docs

    Training and Certification

    • About
    • Course Index
    • Certification Index
    • Skill Assessment
  • Security

    Red Hat Product Security Center

    • Security Updates
    • Security Advisories
    • Red Hat CVE Database
    • Errata

    References

    • Security Bulletins
    • Severity Ratings
    • Security Data

    Top Resources

    • Security Labs
    • Backporting Policies
    • Security Blog
  • Support

    Red Hat Support

    • Support Cases
    • Troubleshoot
    • Get Support
    • Contact Red Hat Support

    Red Hat Community Support

    • Customer Portal Community
    • Community Discussions
    • Red Hat Accelerator Program

    Top Resources

    • Product Life Cycles
    • Customer Portal Labs
    • Red Hat JBoss Supported Configurations
    • Red Hat Lightspeed
Or troubleshoot an issue.

Select Your Language

  • English
  • Français
  • 한국어
  • 日本語
  • 中文 (中国)

Infrastructure and Management

  • Red Hat Enterprise Linux
  • Red Hat Satellite
  • Red Hat Subscription Management
  • Red Hat Lightspeed
  • Red Hat Ansible Automation Platform

Cloud Computing

  • Red Hat OpenShift
  • Red Hat OpenStack Platform
  • Red Hat OpenShift
  • Red Hat OpenShift AI
  • Red Hat OpenShift Dedicated
  • Red Hat Advanced Cluster Security for Kubernetes
  • Red Hat Advanced Cluster Management for Kubernetes
  • Red Hat Quay
  • Red Hat OpenShift Dev Spaces
  • Red Hat OpenShift Service on AWS

Storage

  • Red Hat Gluster Storage
  • Red Hat Hyperconverged Infrastructure
  • Red Hat Ceph Storage
  • Red Hat OpenShift Data Foundation

Runtimes

  • Red Hat Runtimes
  • Red Hat JBoss Enterprise Application Platform
  • Red Hat Data Grid
  • Red Hat JBoss Web Server
  • Red Hat build of Keycloak
  • Red Hat support for Spring Boot
  • Red Hat build of Node.js
  • Red Hat build of Quarkus

Integration and Automation

  • Red Hat Application Foundations
  • Red Hat Fuse
  • Red Hat AMQ
  • Red Hat 3scale API Management
All Products
Red Hat Product Errata RHBA-2025:23378 - Bug Fix Advisory
Issued:
2025-12-16
Updated:
2025-12-18

RHBA-2025:23378 - Bug Fix Advisory

  • Overview
  • Updated Packages

Synopsis

pam bug fix and enhancement update

Type/Severity

Bug Fix Advisory

Red Hat Lightspeed patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for pam is now available for Red Hat Enterprise Linux 8.

Description

Pluggable Authentication Modules (PAM) provide a system to set up authentication policies without the need to recompile programs to handle authentication.

Bug Fix(es) and Enhancement(s):

  • [RHEL8] The third field, as documented in shadow(5) seems to behave wrongly: if empty, the password is considered expired. (JIRA:RHEL-70476)

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux for x86_64 8 x86_64
  • Red Hat Enterprise Linux for IBM z Systems 8 s390x
  • Red Hat Enterprise Linux for Power, little endian 8 ppc64le
  • Red Hat Enterprise Linux for ARM 64 8 aarch64
  • Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 8.10 x86_64
  • Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 8.10 aarch64
  • Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 8.10 ppc64le
  • Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 8.10 s390x

Fixes

  • RHEL-70476 - [RHEL8] The third field, as documented in shadow(5) seems to behave wrongly: if empty, the password is considered expired.

CVEs

(none)

References

(none)

Note: More recent versions of these packages may be available. Click a package name for more details.

Red Hat Enterprise Linux for x86_64 8

SRPM
pam-1.3.1-39.el8_10.src.rpm SHA-256: dbbbd55c9700e19c59e4e425a6b6f08eb4cb77f68967e773b318a8dfbdfdfb93
x86_64
pam-1.3.1-39.el8_10.i686.rpm SHA-256: 98055929c898ce72085ccd0755a61568dc93fe68104070f5e74da4f2ea084bc8
pam-1.3.1-39.el8_10.x86_64.rpm SHA-256: 55f3b294c9a4fbfaea0353a5ed38d15fb87fb9ca79f6cbfe4238923bd76cf4f3
pam-debuginfo-1.3.1-39.el8_10.i686.rpm SHA-256: 45b601134d4e825c86e6a2aa91d3fcb271bbc8b67fc9e789304998d1cffd6507
pam-debuginfo-1.3.1-39.el8_10.x86_64.rpm SHA-256: e0cf405214128d000850a9b506248d9ff0b0c8c0584366a86355bff330eaa4eb
pam-debugsource-1.3.1-39.el8_10.i686.rpm SHA-256: 0568d2da2921d07e4bfc69ff3f2a99f879258e37663d9ee106f70e83ea196d1c
pam-debugsource-1.3.1-39.el8_10.x86_64.rpm SHA-256: 680cb0622380aab21cba8dcfdf041f0a3687ebb0f629e6ba5d20e5e19148c0ca
pam-devel-1.3.1-39.el8_10.i686.rpm SHA-256: 02f7e0329221a4d32a14cad543320123c36bc3493e83e11eb9beeba27985baab
pam-devel-1.3.1-39.el8_10.x86_64.rpm SHA-256: cb75d9478558907312f404fb26829372460c0dce928c025d1806dfa97b4bf490

Red Hat Enterprise Linux for IBM z Systems 8

SRPM
pam-1.3.1-39.el8_10.src.rpm SHA-256: dbbbd55c9700e19c59e4e425a6b6f08eb4cb77f68967e773b318a8dfbdfdfb93
s390x
pam-1.3.1-39.el8_10.s390x.rpm SHA-256: acce7bdddf4ac5c3a25f3042f3f90b490cf0e575c246d0b659a13699fe97e11f
pam-debuginfo-1.3.1-39.el8_10.s390x.rpm SHA-256: 93addb108a8406b1f2e92a62a0d9cde558bfb2b0319cf5e1a41ed904171cbcba
pam-debugsource-1.3.1-39.el8_10.s390x.rpm SHA-256: 31d8bcd0b460c90dfbc436559df2ab50d24a5f6b38c9209b69564ea0f818abbc
pam-devel-1.3.1-39.el8_10.s390x.rpm SHA-256: 148d52df1d9913f6af7fb58deeec279a472efbad060eef5756146f79585b40a4

Red Hat Enterprise Linux for Power, little endian 8

SRPM
pam-1.3.1-39.el8_10.src.rpm SHA-256: dbbbd55c9700e19c59e4e425a6b6f08eb4cb77f68967e773b318a8dfbdfdfb93
ppc64le
pam-1.3.1-39.el8_10.ppc64le.rpm SHA-256: 124fb0871d7ec940aab122357dd21ff64954fc8e9ab9840046c2cf9a80900496
pam-debuginfo-1.3.1-39.el8_10.ppc64le.rpm SHA-256: 6757bcad7f5fa513c855d6f7a54fd3608503b2bd9976a2d71e2bf1e2bd2cde9a
pam-debugsource-1.3.1-39.el8_10.ppc64le.rpm SHA-256: 17bfb1d1676994761a5f83c582a8eb486c3aad2bb7fc24995c12701a4006e3eb
pam-devel-1.3.1-39.el8_10.ppc64le.rpm SHA-256: f1f74af535909aa1f2d18f37a6c5327026e08827a3052841d155e409ee11a2bb

Red Hat Enterprise Linux for ARM 64 8

SRPM
pam-1.3.1-39.el8_10.src.rpm SHA-256: dbbbd55c9700e19c59e4e425a6b6f08eb4cb77f68967e773b318a8dfbdfdfb93
aarch64
pam-1.3.1-39.el8_10.aarch64.rpm SHA-256: aaa134b795b6e6a121d41c20589af4a2bd19a109a1fad429652c55c72676a45b
pam-debuginfo-1.3.1-39.el8_10.aarch64.rpm SHA-256: 253c60b89997f2d6ec3073f6a314fbd467be6dffae93fc6f2ab0c305349048df
pam-debugsource-1.3.1-39.el8_10.aarch64.rpm SHA-256: f6b58d8936b5e0f0a48b95b59bca0d352a3981ec1d674cc963ce7ea5ef2a7760
pam-devel-1.3.1-39.el8_10.aarch64.rpm SHA-256: 7b85f136009d2962a02c6e8297568f927eefd4b71897db859d5f0e01b27fc450

Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 8.10

SRPM
pam-1.3.1-39.el8_10.src.rpm SHA-256: dbbbd55c9700e19c59e4e425a6b6f08eb4cb77f68967e773b318a8dfbdfdfb93
x86_64
pam-1.3.1-39.el8_10.i686.rpm SHA-256: 98055929c898ce72085ccd0755a61568dc93fe68104070f5e74da4f2ea084bc8
pam-1.3.1-39.el8_10.x86_64.rpm SHA-256: 55f3b294c9a4fbfaea0353a5ed38d15fb87fb9ca79f6cbfe4238923bd76cf4f3
pam-debuginfo-1.3.1-39.el8_10.i686.rpm SHA-256: 45b601134d4e825c86e6a2aa91d3fcb271bbc8b67fc9e789304998d1cffd6507
pam-debuginfo-1.3.1-39.el8_10.x86_64.rpm SHA-256: e0cf405214128d000850a9b506248d9ff0b0c8c0584366a86355bff330eaa4eb
pam-debugsource-1.3.1-39.el8_10.i686.rpm SHA-256: 0568d2da2921d07e4bfc69ff3f2a99f879258e37663d9ee106f70e83ea196d1c
pam-debugsource-1.3.1-39.el8_10.x86_64.rpm SHA-256: 680cb0622380aab21cba8dcfdf041f0a3687ebb0f629e6ba5d20e5e19148c0ca
pam-devel-1.3.1-39.el8_10.i686.rpm SHA-256: 02f7e0329221a4d32a14cad543320123c36bc3493e83e11eb9beeba27985baab
pam-devel-1.3.1-39.el8_10.x86_64.rpm SHA-256: cb75d9478558907312f404fb26829372460c0dce928c025d1806dfa97b4bf490

Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 8.10

SRPM
pam-1.3.1-39.el8_10.src.rpm SHA-256: dbbbd55c9700e19c59e4e425a6b6f08eb4cb77f68967e773b318a8dfbdfdfb93
aarch64
pam-1.3.1-39.el8_10.aarch64.rpm SHA-256: aaa134b795b6e6a121d41c20589af4a2bd19a109a1fad429652c55c72676a45b
pam-debuginfo-1.3.1-39.el8_10.aarch64.rpm SHA-256: 253c60b89997f2d6ec3073f6a314fbd467be6dffae93fc6f2ab0c305349048df
pam-debugsource-1.3.1-39.el8_10.aarch64.rpm SHA-256: f6b58d8936b5e0f0a48b95b59bca0d352a3981ec1d674cc963ce7ea5ef2a7760
pam-devel-1.3.1-39.el8_10.aarch64.rpm SHA-256: 7b85f136009d2962a02c6e8297568f927eefd4b71897db859d5f0e01b27fc450

Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 8.10

SRPM
pam-1.3.1-39.el8_10.src.rpm SHA-256: dbbbd55c9700e19c59e4e425a6b6f08eb4cb77f68967e773b318a8dfbdfdfb93
ppc64le
pam-1.3.1-39.el8_10.ppc64le.rpm SHA-256: 124fb0871d7ec940aab122357dd21ff64954fc8e9ab9840046c2cf9a80900496
pam-debuginfo-1.3.1-39.el8_10.ppc64le.rpm SHA-256: 6757bcad7f5fa513c855d6f7a54fd3608503b2bd9976a2d71e2bf1e2bd2cde9a
pam-debugsource-1.3.1-39.el8_10.ppc64le.rpm SHA-256: 17bfb1d1676994761a5f83c582a8eb486c3aad2bb7fc24995c12701a4006e3eb
pam-devel-1.3.1-39.el8_10.ppc64le.rpm SHA-256: f1f74af535909aa1f2d18f37a6c5327026e08827a3052841d155e409ee11a2bb

Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 8.10

SRPM
pam-1.3.1-39.el8_10.src.rpm SHA-256: dbbbd55c9700e19c59e4e425a6b6f08eb4cb77f68967e773b318a8dfbdfdfb93
s390x
pam-1.3.1-39.el8_10.s390x.rpm SHA-256: acce7bdddf4ac5c3a25f3042f3f90b490cf0e575c246d0b659a13699fe97e11f
pam-debuginfo-1.3.1-39.el8_10.s390x.rpm SHA-256: 93addb108a8406b1f2e92a62a0d9cde558bfb2b0319cf5e1a41ed904171cbcba
pam-debugsource-1.3.1-39.el8_10.s390x.rpm SHA-256: 31d8bcd0b460c90dfbc436559df2ab50d24a5f6b38c9209b69564ea0f818abbc
pam-devel-1.3.1-39.el8_10.s390x.rpm SHA-256: 148d52df1d9913f6af7fb58deeec279a472efbad060eef5756146f79585b40a4

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.

Red Hat LinkedIn YouTube Facebook X, formerly Twitter

Quick Links

  • Downloads
  • Subscriptions
  • Support Cases
  • Customer Service
  • Product Documentation

Help

  • Contact Us
  • Customer Portal FAQ
  • Log-in Assistance

Site Info

  • Trust Red Hat
  • Browser Support Policy
  • Accessibility
  • Awards and Recognition
  • Colophon

Related Sites

  • redhat.com
  • developers.redhat.com
  • connect.redhat.com
  • cloud.redhat.com

Red Hat legal and privacy links

  • About Red Hat
  • Jobs
  • Events
  • Locations
  • Contact Red Hat
  • Red Hat Blog
  • Inclusion at Red Hat
  • Cool Stuff Store
  • Red Hat Summit
© 2026 Red Hat

Red Hat legal and privacy links

  • Privacy statement
  • Terms of use
  • All policies and guidelines
  • Digital accessibility